From 9603622715b0c07ebeb829608ccd9e35f66bfd84 Mon Sep 17 00:00:00 2001 From: Jon Shallow Date: Mon, 12 Feb 2024 09:42:54 +0000 Subject: [PATCH] coap-client.c: Enable (D)TLS1.3 support for PSK Only set up Identity Hint checks (not available for (D)TLS1.3, and so forces downgrade to (D)TLS1.2) if -h option is used for the coap-client. --- examples/coap-client.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/examples/coap-client.c b/examples/coap-client.c index 1dc592de..864cbc75 100644 --- a/examples/coap-client.c +++ b/examples/coap-client.c @@ -1421,7 +1421,9 @@ setup_psk(const uint8_t *identity, memset(client_sni, 0, sizeof(client_sni)); memset(&dtls_psk, 0, sizeof(dtls_psk)); dtls_psk.version = COAP_DTLS_CPSK_SETUP_VERSION; - dtls_psk.validate_ih_call_back = verify_ih_callback; + if (valid_ihs.count) { + dtls_psk.validate_ih_call_back = verify_ih_callback; + } dtls_psk.ih_call_back_arg = &dtls_psk.psk_info; if (uri.host.length) memcpy(client_sni, uri.host.s,